Comment 165 for bug 147464

Have being running Ubuntu (9.04 to 9.10) on Toshiba Satellite L40-139 laptop for about a year. Heavy network traffic systematically triggers a crash (either kernel panic or segmentation fault). Among applications that have triggered system crash are: firefox (all versions since 3.2.3), system update manager, a Java-based application downloading via http/ftp as well as bittorrent client and wget. Usually the problem appears within 20-30 min while downloading at speed of 150kBytes/s or more. Just before the moment of crash, tons of messages like:
Feb 3 02:30:04 kovalev-home kernel: [35474.511460] recvmsg bug: copied BFA5DAF9 seq BFA5E0A1
fill up system logs on pair with application-related warning. Sometimes (fifty-fifty) there is no immediate crash after warnings have appeared, but part of downloaded data have become corrupt.

The problem has been observed first with kernel 2.6.28-13 but still persists through current 2.6.31-19, all have been installed from official Ubuntu repositories. Network connection is via Atheros AR5007eg wireless (reported as AR5001 by ath5k). I've experienced this issue with several different routers and providers, though have never got a chance to try a wired connection. As Windows Vista had never crashed by similar network traffic on this laptop, the issue doesn't look like a hardware fault...

An example of warning message right before crash (triggered by bittorrent client):
---------------
Feb 2 12:51:38 kovalev-home kernel: [76478.454177] WARNING: at /build/buildd/linux-2.6.31/net/ipv4/tcp.c:1408 tcp_recvmsg+0xa49/0xb20()
Feb 2 12:51:38 kovalev-home kernel: [76478.454179] Hardware name: Satellite L40
Feb 2 12:51:38 kovalev-home kernel: [76478.454181] Modules linked in: sbp2 xt_tcpudp aes_i586 aes_generic binfmt_misc ppdev nls_iso8859_1 nls_cp437 vfat fat joydev snd_hda_codec_analog arc4 ecb pcmcia snd_hda_intel snd_hda_codec snd_hwdep snd_pcm_oss snd_mixer_oss snd_pcm snd_seq_dummy iptable_filter snd_seq_oss ip_tables x_tables snd_seq_midi snd_rawmidi snd_seq_midi_event snd_seq snd_timer snd_seq_device psmouse serio_raw yenta_socket rsrc_nonstatic pcmcia_core snd shpchp ath5k mac80211 ath cfg80211 soundcore snd_page_alloc asus_laptop led_class video1394 raw1394 lp parport usbhid fbcon tileblit font bitblit softcursor 8139too 8139cp mii ohci1394 ieee1394 i915 drm i2c_algo_bit intel_agp agpgart video output
Feb 2 12:51:38 kovalev-home kernel: [76478.454230] Pid: 2357, comm: transmission Tainted: G W 2.6.31-18-generic #55-Ubuntu
Feb 2 12:51:38 kovalev-home kernel: [76478.454233] Call Trace:
Feb 2 12:51:38 kovalev-home kernel: [76478.454237] [<c014513d>] warn_slowpath_common+0x6d/0xa0
Feb 2 12:51:38 kovalev-home kernel: [76478.454242] [<c04d2439>] ? tcp_recvmsg+0xa49/0xb20
Feb 2 12:51:38 kovalev-home kernel: [76478.454245] [<c04d2439>] ? tcp_recvmsg+0xa49/0xb20
Feb 2 12:51:38 kovalev-home kernel: [76478.454250] [<c0145185>] warn_slowpath_null+0x15/0x20
Feb 2 12:51:38 kovalev-home kernel: [76478.454254] [<c04d2439>] tcp_recvmsg+0xa49/0xb20
Feb 2 12:51:38 kovalev-home kernel: [76478.454259] [<c0492433>] sock_common_recvmsg+0x43/0x60
Feb 2 12:51:38 kovalev-home kernel: [76478.454263] [<c04920ac>] sock_aio_read+0x11c/0x130
Feb 2 12:51:38 kovalev-home kernel: [76478.454267] [<c01e78fc>] do_sync_read+0xbc/0x100
Feb 2 12:51:38 kovalev-home kernel: [76478.454272] [<c015c1d0>] ? autoremove_wake_function+0x0/0x40
Feb 2 12:51:38 kovalev-home kernel: [76478.454276] [<c04f02c1>] ? inet_ioctl+0x31/0xb0
Feb 2 12:51:38 kovalev-home kernel: [76478.454280] [<c02cbb7f>] ? security_file_permission+0xf/0x20
Feb 2 12:51:38 kovalev-home kernel: [76478.454284] [<c01e799f>] ? rw_verify_area+0x5f/0xe0
Feb 2 12:51:38 kovalev-home kernel: [76478.454287] [<c0490940>] ? sock_ioctl+0x0/0x260
Feb 2 12:51:38 kovalev-home kernel: [76478.454291] [<c01e7fda>] vfs_read+0x17a/0x190
Feb 2 12:51:38 kovalev-home kernel: [76478.454295] [<c01f5651>] ? do_vfs_ioctl+0x71/0x310
Feb 2 12:51:38 kovalev-home kernel: [76478.454299] [<c0217e0d>] ? sys_epoll_ctl+0x9d/0x240
Feb 2 12:51:38 kovalev-home kernel: [76478.454303] [<c01e850d>] sys_read+0x3d/0x70
Feb 2 12:51:38 kovalev-home kernel: [76478.454307] [<c01033ac>] syscall_call+0x7/0xb
Feb 2 12:51:38 kovalev-home kernel: [76478.454309] ---[ end trace 1d3e832a4fd8afb9 ]---
Feb 2 12:51:38 kovalev-home kernel: [76478.454312] recvmsg bug: copied 7B0ADBE3 seq 7B0AE18B
---------------